White Box Or Black Box For Social Engineering Testing?

White Box Or Black Box For Social Engineering Testing?

When conducting social engineering testing as part of an audit or security assessment, should the client provide a listing of employees to test? Doing so is generally termed white box testing, as detailed information is provided to the auditor. The term “white box testing” was ori

Sep 03, 2013
On-site or Offsite Social Engineering Testing

On-site or Offsite Social Engineering Testing

Although there is value in onsite social engineering, for the money offsite social engineering, such as that provided by PhishingBox is much more cost effective. Only in rare circumstances, will attackers attempt anything that require their physical presence. As such, most organizations do not need onsite testing.

Feb 21, 2012